trust-wallet[.]cfd

This domain, trust‑wallet.cfd, was registered on 14 May 2026 through Global Domain Group LLC and currently resolves to the IPv4 address 104.248.137.19, which is hosted by DigitalOcean, LLC in Germany. The site presents a TLS certificate issued by Let’s Encrypt (E8) and uses Google Cloud DNS nameservers ns‑cloud‑a1, a2 and a3. The page title returned by the HTTP 200 response is “Lexa — Your English Coach”, which bears no obvious relation to the targeted brand, Trust Wallet, confirming a brand‑impersonation intent. Infrastructure analysis shows a Gridinsoft trust score of 0 / 100 and the domain appears on three public security blocklists. It is listed in one AlienVault OTX pulse and has been flagged by one of ninety‑two VirusTotal scanners. The domain is also blocked by PhishDestroy, MetaMask and SEAL. No additional payload, script or credential‑stealing page has been observed, and the exact malicious content remains unknown. Defenders should immediately add trust‑wallet.cfd to URL filtering and DNS block policies, monitor for any outbound connections to the associated IP, and ensure that endpoint protection solutions are updated to flag the Let’s Encrypt certificate associated with this host. Ongoing intelligence collection is advised to determine whether the site hosts credential‑stealing forms or redirects to further malicious infrastructure.